access_point_policies
Creates, updates, deletes or gets an access_point_policy
resource or lists access_point_policies
in a region
Overview
Name | access_point_policies |
Type | Resource |
Description | AWS::S3ObjectLambda::AccessPointPolicy resource is an Amazon S3ObjectLambda policy type that you can use to control permissions for your S3ObjectLambda |
Id | aws.s3objectlambda.access_point_policies |
Fields
Name | Datatype | Description |
---|---|---|
object_lambda_access_point | string | The name of the Amazon S3 ObjectLambdaAccessPoint to which the policy applies. |
policy_document | object | A policy document containing permissions to add to the specified ObjectLambdaAccessPoint. For more information, see Access Policy Language Overview (https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the Amazon Simple Storage Service Developer Guide. |
region | string | AWS region. |
Methods
Name | Accessible by | Required Params |
---|---|---|
create_resource | INSERT | ObjectLambdaAccessPoint, PolicyDocument, region |
delete_resource | DELETE | data__Identifier, region |
update_resource | UPDATE | data__Identifier, data__PatchDocument, region |
get_resource | SELECT | data__Identifier, region |
SELECT
examples
Gets all properties from an individual access_point_policy
.
SELECT
region,
object_lambda_access_point,
policy_document
FROM aws.s3objectlambda.access_point_policies
WHERE region = 'us-east-1' AND data__Identifier = '<ObjectLambdaAccessPoint>';
INSERT
example
Use the following StackQL query and manifest file to create a new access_point_policy
resource, using stack-deploy
.
- Required Properties
- All Properties
- Manifest
/*+ create */
INSERT INTO aws.s3objectlambda.access_point_policies (
ObjectLambdaAccessPoint,
PolicyDocument,
region
)
SELECT
'{{ ObjectLambdaAccessPoint }}',
'{{ PolicyDocument }}',
'{{ region }}';
/*+ create */
INSERT INTO aws.s3objectlambda.access_point_policies (
ObjectLambdaAccessPoint,
PolicyDocument,
region
)
SELECT
'{{ ObjectLambdaAccessPoint }}',
'{{ PolicyDocument }}',
'{{ region }}';
version: 1
name: stack name
description: stack description
providers:
- aws
globals:
- name: region
value: '{{ vars.AWS_REGION }}'
resources:
- name: access_point_policy
props:
- name: ObjectLambdaAccessPoint
value: '{{ ObjectLambdaAccessPoint }}'
- name: PolicyDocument
value: {}
DELETE
example
/*+ delete */
DELETE FROM aws.s3objectlambda.access_point_policies
WHERE data__Identifier = '<ObjectLambdaAccessPoint>'
AND region = 'us-east-1';
Permissions
To operate on the access_point_policies
resource, the following permissions are required:
Create
s3:PutAccessPointPolicyForObjectLambda,
s3:GetAccessPointPolicyForObjectLambda
Read
s3:GetAccessPointPolicyForObjectLambda
Update
s3:PutAccessPointPolicyForObjectLambda,
s3:GetAccessPointPolicyForObjectLambda
Delete
s3:DeleteAccessPointPolicyForObjectLambda,
s3:GetAccessPointPolicyForObjectLambda